ilpanich / axiam / 39120695003

93%

push

github

fix(website): headings, table headers and threat text render inline markup

Several places printed their text raw, so backticks — and in the threat
explorer `**` — showed up literally: section headings and the "On this
page" index (`Deriving `TRUSTED_HOPS``), table headers, card titles and
bodies, code-block captions, and every threat's title, description and
mitigation in the explorer (303 mitigations carry code, 175 bold).

They now go through renderInline, like paragraphs already did.

renderItalic is stricter first, because the threat text names paths
such as `/api/v1/*`, `v* tags` and "the * wildcard": a bare split on `*`
italicised the text between two of them. An asterisk now opens emphasis
only after a space, punctuation or the start and before a non-space,
and closes only before a space, punctuation or the end. Compared before
and after on every docs page and the Security page, the only
differences are two such misfires gone ("/oauth2/* with an OAuth2 error
body" on the error reference, "v* tags" in the T-148 register row).

Checked in a browser: no literal backtick, `**` or `](` outside code
blocks on any docs page; 35 markup-heavy threats render clean in the
explorer; every page still fits 390 px. Lint, type-check and build pass.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Kj91z3MPegEqsY6Lq8xVk5

5281 of 5830 branches covered (90.58%)

Branch coverage included in aggregate %.

144154 of 154702 relevant lines covered (93.18%)

907.92 hits per line